Law firms continue to increase their focus on cybersecurity, but
according to the American Bar Association's (ABA) latest
Legal Technology Survey Report, only about one-third of
respondents have an incident response plan. As the ABA notes, all
law firms need tailored cybersecurity programs and having an
incident response plan is a critical part of such programs. This
blog looks at how a law firm's response to a data breach will
go a long way toward mitigating — or exacerbating —
financial and reputational costs.
Why Your Law Firm Needs a Plan
Law firms are vulnerable to both internal and external
incidents. Whether it is an attorney losing a device containing
confidential information, an administrator falling prey to a
phishing or ransomware attack, or a hacker targeting the firm, the
consequences can be devastating.
